CVE-2026-2746: Missing PGP Signature Tag
Published Mar 4, 2026
·Updated
SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.
Affected Software
2 affected components
SEPPmail Secure Email Gateway<15.0.1
SEPPmail SEPPmail<15.0.1
Event History
Mar 4, 2026
CVE Published
via MITRE·08:44 AM
Data Sourced
via MITRE·08:44 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-2746?
CVE-2026-2746 is classified as a medium severity vulnerability due to its impact on email authenticity.
2
How do I fix CVE-2026-2746?
To fix CVE-2026-2746, upgrade SEPPmail Secure Email Gateway to version 15.0.1 or later.
3
What is the impact of CVE-2026-2746 on users?
CVE-2026-2746 allows users to be unaware of forged emails, compromising email security and potentially leading to phishing attacks.
4
What software versions are affected by CVE-2026-2746?
CVE-2026-2746 affects all versions of SEPPmail Secure Email Gateway prior to 15.0.1.
5
Is CVE-2026-2746 easy to exploit?
CVE-2026-2746 can be exploited by attackers to deliver forged emails without detection, making it a significant risk to organizations.